Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/855002-d823-41fe-8f9a-718fd195c5eb/1/0YWWGLY2ws5dEm_54FSQZ1sndS4.roa
File: 0YWWGLY2ws5dEm_54FSQZ1sndS4.roa (raw, json)
Hash identifier: NrM8b8iTRjQj/SggeT540k8LBz4kUfRyQupPzxIyzNo=
Subject key identifier: D1:85:96:18:B6:36:C2:CE:5D:12:6F:F9:E0:54:90:67:5B:27:75:2E
Certificate issuer: /CN=f73cdc6751d7c59073e4b706402d3691af09086f
Certificate serial: 019715878EA46E10B1E79B08E8A6782267CD
Authority key identifier: F7:3C:DC:67:51:D7:C5:90:73:E4:B7:06:40:2D:36:91:AF:09:08:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9zzcZ1HXxZBz5LcGQC02ka8JCG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/855002-d823-41fe-8f9a-718fd195c5eb/1/0YWWGLY2ws5dEm_54FSQZ1sndS4.roa
Signing time: Wed 28 May 2025 06:14:54 +0000
ROA not before: Wed 28 May 2025 06:14:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208599
IP address blocks: 45.82.148.0/22 maxlen: 22
2a0e:6c80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/855002-d823-41fe-8f9a-718fd195c5eb/1/9zzcZ1HXxZBz5LcGQC02ka8JCG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/855002-d823-41fe-8f9a-718fd195c5eb/1/9zzcZ1HXxZBz5LcGQC02ka8JCG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/9zzcZ1HXxZBz5LcGQC02ka8JCG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:15:87:8e:a4:6e:10:b1:e7:9b:08:e8:a6:78:22:67:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f73cdc6751d7c59073e4b706402d3691af09086f
Validity
Not Before: May 28 06:14:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d1859618b636c2ce5d126ff9e05490675b27752e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:39:be:af:07:14:b4:59:87:f9:3b:63:05:bb:
fb:91:3b:75:30:b5:bc:ad:72:ac:43:4e:0e:d9:c8:
70:4b:83:d9:67:a6:d7:87:87:de:55:98:d5:2b:0e:
e6:09:a9:26:10:24:05:d6:ff:63:1d:29:ee:dd:e2:
c9:00:fb:97:1f:e2:ed:0b:60:08:09:8a:db:45:8c:
4a:c5:db:5e:a2:91:fd:4e:fb:db:bb:48:a5:32:30:
b5:6e:b1:63:4e:8f:f9:a9:31:79:20:6d:15:c3:91:
eb:55:4a:87:ae:47:7a:4a:d5:de:66:60:0f:b6:be:
18:48:66:bd:9b:fb:15:6a:12:a2:f1:7b:fb:1b:c5:
e7:cb:3f:2e:20:af:4b:eb:3b:e6:7a:9b:51:44:72:
16:10:f6:21:0e:8e:18:24:36:a4:1d:4c:9b:0d:19:
ad:d4:c8:71:02:ad:cf:14:d9:35:36:da:96:e5:e9:
0c:f1:05:b7:84:4d:49:50:3e:78:9d:12:7c:68:ee:
7a:83:e5:5b:60:24:a0:17:3c:75:9f:74:c6:58:c3:
76:57:13:30:af:a8:b9:14:4a:78:98:59:75:43:3d:
f3:f8:2d:11:a2:4c:ad:9b:8c:b8:91:0b:85:34:28:
cd:3b:21:56:42:df:30:14:7f:f0:5d:d5:dc:01:76:
f9:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:85:96:18:B6:36:C2:CE:5D:12:6F:F9:E0:54:90:67:5B:27:75:2E
X509v3 Authority Key Identifier:
keyid:F7:3C:DC:67:51:D7:C5:90:73:E4:B7:06:40:2D:36:91:AF:09:08:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9zzcZ1HXxZBz5LcGQC02ka8JCG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/855002-d823-41fe-8f9a-718fd195c5eb/1/0YWWGLY2ws5dEm_54FSQZ1sndS4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/855002-d823-41fe-8f9a-718fd195c5eb/1/9zzcZ1HXxZBz5LcGQC02ka8JCG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.148.0/22
IPv6:
2a0e:6c80::/29
Signature Algorithm: sha256WithRSAEncryption
9a:b0:ec:d6:00:c9:38:69:cb:3c:0a:c7:65:4d:61:50:5c:88:
21:16:b7:7f:22:c0:e5:8a:c3:11:00:f5:cd:ed:b0:59:85:20:
bd:45:99:4e:27:26:8a:98:f0:ae:cf:c0:b4:a8:22:0f:76:dd:
ed:81:7e:b3:b2:29:93:93:9d:f8:c5:c4:d6:aa:47:65:bc:15:
fa:10:f6:e5:47:e9:8c:0e:fa:9a:75:43:8b:86:a6:6f:67:d2:
13:bb:05:77:c1:ea:41:68:c4:70:7d:5b:58:42:13:e7:f5:eb:
d9:ae:5b:38:a7:f5:65:3e:5f:c7:f5:09:4c:4f:cb:91:05:ed:
81:d3:83:6a:08:3e:6b:ca:e1:28:7c:83:b6:80:ee:af:d5:99:
16:14:72:a9:02:49:fa:91:22:76:3d:bf:bc:a9:d5:a2:0a:a1:
3c:e8:ed:e4:05:c3:c1:cd:1e:0e:4b:c4:a6:26:0d:30:31:c5:
43:1a:0a:bf:10:7e:f0:ce:12:1d:ae:53:63:5c:ea:b3:5f:63:
ba:e7:2d:f5:bc:a4:74:e9:6f:10:56:e6:89:d9:12:01:4f:77:
f9:1a:32:63:29:8b:ba:08:84:57:6a:f2:49:a5:33:40:8e:c0:
f4:74:73:24:27:b1:8a:d6:47:61:7c:df:77:13:6a:64:31:c3:
46:1f:b0:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:36:37 2025 by rpki-client